SMS deprecation July 2023 - Microsoft Q&A (2024)

FAQs

Is Microsoft discontinuing SMS authentication? ›

You will not be able to add users to an exemption group that will allow them to still use SMS after July 2023. Microsoft will no longer support SMS for certain types of sign-ins, including sign-ins from new devices and sign-ins that require multi-factor authentication.

Microsoft is not disabling the voice/SMS methods currently, they are simply recommending that you switch to another method, where possible.

In 2007, System Management Service (SMS) became System Center Configuration Manager (SCCM).

SMS Encryption and Malware Threats

SMS messages are unencrypted, making them easy targets for interception and unauthorized reading. Sensitive information, like authentication codes, can fall into the wrong hands, leading to account breaches.

The answer is, no. From a person-to-person text message perspective, the popularity of this technology as a communications medium cannot be denied. The same thing can be said for businesses.

Rich Communication Services (RCS) is a protocol aimed at replacing SMS messages with a richer text-message system that can transmit in-call multimedia, provide phonebook polling, and transmit other types of content.

You should use an authenticator app over SMS authentication because it is more secure and less likely to be intercepted by cybercriminals. Authenticator apps generate 2FA codes locally on a device, rather than sending them unencrypted over text message.

Microsoft has announced it will be enforcing Multi-Factor Authentication (MFA) for all Microsoft 365 tenants beginning March 11, 2024. Microsoft will begin its rollout of security defaults on all tenants that don't already have security defaults or Conditional Access policies enabled.

MFA has played an important part in the fight against phishing by making it more difficult for malicious hackers to employ end users' login credentials for their gain.

That is according to data from communications firm Infobip, which showed that 30% of those surveyed said they sent text messages daily – with 54% saying they used SMS as a way of reaching people who were not on other messaging platforms.

Is SMS still a thing? ›

Instant messaging on cell phones began with SMS, which stands for short message service (or short messaging service). Originally, an SMS text message could only contain basic characters, and had a tight limitation on message length. SMS has progressed a lot since its origin, and it's still an important protocol today.

SMS is an acronym for Short Message Service, and it's the most common form of text messaging used today. A single text message is limited to 160 characters, including spaces. MMS stands for Multimedia Messaging Service.

Microsoft will no longer support SMS for certain types of sign-ins, including sign-ins from new devices and sign-ins that require multi-factor authentication. This is being done to improve security and reduce the risk of unauthorized access.

Spoofing/phishing

Hackers use good old-fashioned spoofing, often combined with phishing, to intercept and read your SMS messages. For those in the know, it's basic tradecraft. This is because SMS messages rely on the security of phone networks and phone companies. Both, sadly, are notoriously easy to access.

SMS has long been regarded as a vulnerable communications protocol by security experts—but where 2FA is concerned, the biggest danger is with the possibility of SIM-swapping attacks.

Beginning in early 2023, we disabled Basic authentication for all tenants who had any type of extension. You can read more about the timing here. In Office 365 Operated by 21Vianet, we began disabling Basic authentication on March 31, 2023. All other cloud environments were subject to the October 1, 2022 date.

Try using another verification method connected to your account. For example, if you are using SMS to verify yourself and are hitting a block, try using an alternate email that is connected to the account to receive your authorization code.

You should use an authenticator app over SMS authentication because it is more secure and less likely to be intercepted by cybercriminals. Authenticator apps generate 2FA codes locally on a device, rather than sending them unencrypted over text message.